|
PASS
|
DNS (A / AAAA)
This check completed successfully.
Records found: 2.
|
|
PASS
|
Nameservers (NS)
This check completed successfully.
Nameservers found: 2.
|
|
PASS
|
Mail exchangers (MX)
This check completed successfully.
Mail servers found: 1.
|
|
FAIL
|
SPF (TXT)
No SPF record was found, so sending is not restricted.
What to do: Add a TXT record at Cloudflare listing every service that sends mail for this domain. If Google Workspace also handles your outbound mail, a common starting point is: v=spf1 include:_spf.google.com -all.
|
|
WARNING
|
DMARC (TXT)
The DMARC policy is p=none: reports only, without enforcement.
What to do: Once reports look clean, raise p=none to p=quarantine, then p=reject, to actually block spoofing.
|
|
PASS
|
DKIM (TXT)
This check completed successfully.
DKIM key found on selector: resend.
|
|
PASS
|
HTTPS
This check completed successfully.
HTTP status: 200.
|
|
PASS
|
HTTP
Plain HTTP redirects to HTTPS, which is the recommended setup.
HTTP status: 200.
|
|
WARNING
|
TLS certificate
The certificate expires soon and should be renewed.
Certificate expires in 12 days.
What to do: Renew the certificate — usually an automatic Let's Encrypt job; check that the renewal still runs.
|
|
PASS
|
Security headers
This check completed successfully.
Security headers found: 4 of 4.
|
|
PASS
|
CAA
This check completed successfully.
CAA records found: 1.
|
|
PASS
|
robots.txt
This check completed successfully.
|
|
PASS
|
sitemap.xml
This check completed successfully.
|
